# Filebeat in crashing 7.9.0

**URL:** <https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 3, 2020, 5:08pm UTC](https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425 "2020-09-03T17:08:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![newmember](https://avatars.discourse-cdn.com/v4/letter/n/ce7236/32.png) [@newmember](https://discuss.elastic.co/u/newmember)\
**Post date:** [September 3, 2020, 5:08pm UTC](https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425/1 "2020-09-03T17:08:42Z")

</div>

filebeat is crashing, everything works and feeds for 30min then filebeat crashes  
centos 6.10  
filebeat 7.9.0  
yum package install  
increased logging to debug  
these are the last lines of the filebeat logs

```auto
2020-09-03T10:10:13.803-0600 DEBUG [harvester] log/harvester.go:205 Harvester setup successful. Line terminator: 1
2020-09-03T10:10:13.803-0600 INFO log/harvester.go:297 Harvester started for file: /home/com/OC/led/CDF.bfb04f22-bfb1-48d9
2020-09-03T10:10:13.803-0600 INFO [detect_null_bytes] debug/debug.go:95 Starting debug reader with a buffer size of 16384 and max failures of 100
2020-09-03T10:10:13.852-0600 INFO log/harvester.go:297 Harvester started for file: /home/com/OC/led/CDF.c55da7fc-56b3-46bf
2020-09-03T10:10:13.852-0600 INFO [detect_null_bytes] debug/debug.go:95 Starting debug reader with a buffer size of 16384 and max failures of 100
2020-09-03T10:10:13.852-0600 INFO log/harvester.go:297 Harvester started for file: /home/com/OC/led/CDF.e414b95d-5331-49f9
2020-09-03T10:10:13.852-0600 INFO [detect_null_bytes] debug/debug.go:95 Starting debug reader with a buffer size of 16384 and max failures of 100

```

I did read about "Configure the internal queue" but I am unsure if I am looking in the correct spot.

Suggestions please, thank you.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 3, 2020, 9:26pm UTC](https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425/2 "2020-09-03T21:26:40Z")

</div>

Is there more to the log before that?

---

<div class="post-metadata">

**Author:** ![newmember](https://avatars.discourse-cdn.com/v4/letter/n/ce7236/32.png) [@newmember](https://discuss.elastic.co/u/newmember)\
**Post date:** [September 5, 2020, 12:53am UTC](https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425/3 "2020-09-05T00:53:28Z")

</div>

There are json objects of events being passed to logstash

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 3, 2020, 2:53am UTC](https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425/4 "2020-10-03T02:53:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.